US11055406B2 - Application security protection method, terminal, and storage medium - Google Patents
Application security protection method, terminal, and storage medium Download PDFInfo
- Publication number
- US11055406B2 US11055406B2 US15/438,251 US201715438251A US11055406B2 US 11055406 B2 US11055406 B2 US 11055406B2 US 201715438251 A US201715438251 A US 201715438251A US 11055406 B2 US11055406 B2 US 11055406B2
- Authority
- US
- United States
- Prior art keywords
- application software
- malicious
- software
- application
- terminal
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active, expires
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/55—Detecting local intrusion or implementing counter-measures
- G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements
- G06F21/566—Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
- G06F3/01—Input arrangements or combined input and output arrangements for interaction between user and computer
- G06F3/048—Interaction techniques based on graphical user interfaces [GUI]
- G06F3/0484—Interaction techniques based on graphical user interfaces [GUI] for the control of specific functions or operations, e.g. selecting or manipulating an object, an image or a displayed text element, setting a parameter value or selecting a range
- G06F3/04842—Selection of displayed objects or displayed text elements
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/03—Indexing scheme relating to G06F21/50, monitoring users, programs or devices to maintain the integrity of platforms
- G06F2221/033—Test or assess software
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
- G06F3/01—Input arrangements or combined input and output arrangements for interaction between user and computer
- G06F3/048—Interaction techniques based on graphical user interfaces [GUI]
- G06F3/0481—Interaction techniques based on graphical user interfaces [GUI] based on specific properties of the displayed interaction object or a metaphor-based environment, e.g. interaction with desktop elements like windows or icons, or assisted by a cursor's changing behaviour or appearance
Definitions
- Step S 303 Prompt information indicating that the current application software is malicious software is provided.
- Step S 304 It is judged whether an opening continuing instruction for continuing to open the current application software is received, and if so, Step S 305 is executed.
- Step S 305 The current application software is started.
- Step S 303 the current application software may be not opened in view of actual factors, and therefore an opening cancellation instruction will be received probably. After the opening cancellation instruction is received, start of the current application software may be stopped.
- FIG. 4 shows a flowchart of an application security protection method according to this specific example.
- an application software list in a predetermined application type is firstly acquired so as to open corresponding application software.
- an application software list of application software, installed locally, in a predetermined application type is acquired firstly, it is judged whether each of application software in the application software list is malicious software, and the application software determined as malicious software is identified.
- the current application software may be directly opened.
- prompt information indicating that the current application software is malicious software is provided, thereby performing secondary reminder. Based on the prompt information, a user of the smart terminal may choose to continue opening the current application software, or may select to cancel opening of the current application software.
- an opening cancellation instruction will be received, and after the opening cancellation instruction is received, start of the current application software is stopped. Moreover, prompt information indicating that whether to uninstall the current application software may be provided, and after an uninstalling instruction is received, the current application software is uninstalled.
- FIG. 5 shows a flowchart of an application security protection method according to the specific example.
- the method in this example includes the process as follows.
- a specific structure will be provided on the smart terminal to store information about the recently-opened application software.
- a specific stack is provided to store information about a recently-opened application. For example, if the smart terminal sequentially opens three pieces of application software A, B and C, the stack will include information regarding C, B and A, where information regarding C is stored at the top of the stack. That is, information about a currently-opened application program is stored at the top of the stack. Therefore, the information about the recently-opened application software may be obtained from the top of the stack.
- a specific judgement method may involve comparing the obtained information about the current application software with a game software library, and if the comparison indicates consistency, determining it as game software.
- the current application software is application software in a predetermined application type, it is further judged whether the current application software is malicious software. If the current application software is not malicious software, the current application software may be directly opened.
- prompt information indicating that the current application software is malicious software is provided, thereby performing secondary reminder. Based on the prompt information, a user of the smart terminal may choose to continue opening the current application software, or may select to cancel opening of the current application software.
- an opening cancellation instruction will be received, and after the opening cancellation instruction is received, start of the current application software is stopped. Moreover, prompt information indicating that whether to uninstall the current application software may be provided, and after an uninstalling instruction is received, the current application software is uninstalled.
- screening application software in a predetermined application type from all of application software and generating an application software list in a predetermined application type, wherein the application software list includes information about each of screened application software in the predetermined application type.
- the step of screening the application software in the predetermined application type from all of application software may be executed in the modes as follows.
- One of the modes may be: comparing each of application software with a software database, locally installed on the smart terminal, in a predetermined application type, if the comparison indicates consistency, determining that the application software is the application software in the predetermined application type, and if the comparison indicates inconsistency, determining that the application software is not the application software in the predetermined application type.
- scanning each of application software in the application software list may be further started, and a scanning result of each of application software in the application software list is obtained.
- Scanning each of application software may be performed by directly calling local virus scanning software.
- the information about each of application software may be sent to the cloud server and scanned by the cloud server to obtain a scanning result.
- the corresponding application software is malicious software. If it is malicious software, the malicious type of the malicious software is identified according to the scanning result, and the information about the corresponding application software is added to a local malicious software library of the smart terminal on the basis of the malicious type.
- information about the current application software may be directly compared with the local malicious software library of the smart terminal. If a comparison result indicates inconsistency, it may be determined that the current application software is not malicious software. If the comparison result indicates consistency, it may be directly determined that the current application software is malicious software, and the malicious type of the malicious software may be determined to prompt the user of the smart terminal.
- a mode of judging whether the application software is the application software in the predetermined application type may be the same as the mode in the example corresponding to FIG. 6 .
- a list generation module 1302 configured to screen information about application software in a predetermined application type from all of application software, and generate an application software list.
Landscapes
- Engineering & Computer Science (AREA)
- General Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Software Systems (AREA)
- Computer Hardware Design (AREA)
- General Physics & Mathematics (AREA)
- Physics & Mathematics (AREA)
- Virology (AREA)
- Health & Medical Sciences (AREA)
- General Health & Medical Sciences (AREA)
- Human Computer Interaction (AREA)
- Stored Programmes (AREA)
- Storage Device Security (AREA)
Applications Claiming Priority (3)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201510197322.4A CN106156619B (zh) | 2015-04-23 | 2015-04-23 | 应用安全防护方法及装置 |
CN201510197322.4 | 2015-04-23 | ||
PCT/CN2016/077431 WO2016169390A1 (zh) | 2015-04-23 | 2016-03-25 | 应用安全防护方法、终端、存储介质 |
Related Parent Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/CN2016/077431 Continuation WO2016169390A1 (zh) | 2015-04-23 | 2016-03-25 | 应用安全防护方法、终端、存储介质 |
Publications (2)
Publication Number | Publication Date |
---|---|
US20170161500A1 US20170161500A1 (en) | 2017-06-08 |
US11055406B2 true US11055406B2 (en) | 2021-07-06 |
Family
ID=57144344
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US15/438,251 Active 2037-03-25 US11055406B2 (en) | 2015-04-23 | 2017-02-21 | Application security protection method, terminal, and storage medium |
Country Status (3)
Country | Link |
---|---|
US (1) | US11055406B2 (zh) |
CN (1) | CN106156619B (zh) |
WO (1) | WO2016169390A1 (zh) |
Families Citing this family (25)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8977255B2 (en) | 2007-04-03 | 2015-03-10 | Apple Inc. | Method and system for operating a multi-function portable electronic device using voice-activation |
US8676904B2 (en) | 2008-10-02 | 2014-03-18 | Apple Inc. | Electronic devices with voice command and contextual data processing capabilities |
CN104969289B (zh) | 2013-02-07 | 2021-05-28 | 苹果公司 | 数字助理的语音触发器 |
US10170123B2 (en) | 2014-05-30 | 2019-01-01 | Apple Inc. | Intelligent assistant for home automation |
US9338493B2 (en) | 2014-06-30 | 2016-05-10 | Apple Inc. | Intelligent automated assistant for TV user interactions |
US10460227B2 (en) | 2015-05-15 | 2019-10-29 | Apple Inc. | Virtual assistant in a communication session |
US10747498B2 (en) | 2015-09-08 | 2020-08-18 | Apple Inc. | Zero latency digital assistant |
US10671428B2 (en) * | 2015-09-08 | 2020-06-02 | Apple Inc. | Distributed personal assistant |
US10691473B2 (en) | 2015-11-06 | 2020-06-23 | Apple Inc. | Intelligent automated assistant in a messaging environment |
DK180048B1 (en) | 2017-05-11 | 2020-02-04 | Apple Inc. | MAINTAINING THE DATA PROTECTION OF PERSONAL INFORMATION |
DK179496B1 (en) | 2017-05-12 | 2019-01-15 | Apple Inc. | USER-SPECIFIC Acoustic Models |
DK201770429A1 (en) | 2017-05-12 | 2018-12-14 | Apple Inc. | LOW-LATENCY INTELLIGENT AUTOMATED ASSISTANT |
DK201770411A1 (en) | 2017-05-15 | 2018-12-20 | Apple Inc. | MULTI-MODAL INTERFACES |
US20180336275A1 (en) | 2017-05-16 | 2018-11-22 | Apple Inc. | Intelligent automated assistant for media exploration |
CN108320211A (zh) * | 2018-01-19 | 2018-07-24 | 广东小天才科技有限公司 | 移动终端的订单管理方法、装置、终端及存储介质 |
US10928918B2 (en) | 2018-05-07 | 2021-02-23 | Apple Inc. | Raise to speak |
DK180639B1 (en) | 2018-06-01 | 2021-11-04 | Apple Inc | DISABILITY OF ATTENTION-ATTENTIVE VIRTUAL ASSISTANT |
US11462215B2 (en) | 2018-09-28 | 2022-10-04 | Apple Inc. | Multi-modal inputs for voice commands |
US11348573B2 (en) | 2019-03-18 | 2022-05-31 | Apple Inc. | Multimodality in digital assistant systems |
US11307752B2 (en) | 2019-05-06 | 2022-04-19 | Apple Inc. | User configurable task triggers |
DK201970509A1 (en) | 2019-05-06 | 2021-01-15 | Apple Inc | Spoken notifications |
US11227599B2 (en) | 2019-06-01 | 2022-01-18 | Apple Inc. | Methods and user interfaces for voice-based control of electronic devices |
US11061543B1 (en) | 2020-05-11 | 2021-07-13 | Apple Inc. | Providing relevant data items based on context |
US11490204B2 (en) | 2020-07-20 | 2022-11-01 | Apple Inc. | Multi-device audio adjustment coordination |
US11438683B2 (en) | 2020-07-21 | 2022-09-06 | Apple Inc. | User identification using headphones |
Citations (15)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20060150256A1 (en) * | 2004-12-03 | 2006-07-06 | Whitecell Software Inc. A Delaware Corporation | Secure system for allowing the execution of authorized computer program code |
US20070079377A1 (en) * | 2005-09-30 | 2007-04-05 | International Business Machines Corporation | Virus scanning in a computer system |
US20070240217A1 (en) * | 2006-04-06 | 2007-10-11 | George Tuvell | Malware Modeling Detection System And Method for Mobile Platforms |
US20090100520A1 (en) * | 2007-10-12 | 2009-04-16 | Microsoft Corporation | Detection and dynamic alteration of execution of potential software threats |
US20090165131A1 (en) * | 2007-12-20 | 2009-06-25 | Treadwell William S | Detection and prevention of malicious code execution using risk scoring |
US20090241191A1 (en) | 2006-05-31 | 2009-09-24 | Keromytis Angelos D | Systems, methods, and media for generating bait information for trap-based defenses |
US20100332996A1 (en) * | 2009-06-25 | 2010-12-30 | Nokia Corporation | Method and apparatus of acquiring information regarding applications for display on a user interface |
CN102799812A (zh) | 2012-06-28 | 2012-11-28 | 腾讯科技(深圳)有限公司 | 应用程序的处理方法和装置 |
CN103136476A (zh) | 2011-12-01 | 2013-06-05 | 深圳市证通电子股份有限公司 | 移动智能终端恶意软件分析*** |
CN103218564A (zh) | 2013-04-01 | 2013-07-24 | 广东欧珀移动通信有限公司 | 一种移动终端保护方法及装置 |
US20130198872A1 (en) * | 2010-09-30 | 2013-08-01 | Lenovo (Beijing) Co., Ltd. | Method for component access control and electronic device |
US20130276056A1 (en) * | 2012-04-13 | 2013-10-17 | Cisco Technology, Inc. | Automatic curation and modification of virtualized computer programs |
US20130318614A1 (en) * | 2012-05-22 | 2013-11-28 | Verizon Patent And Licensing Inc. | Mobile application security assessment |
CN104050417A (zh) | 2014-07-04 | 2014-09-17 | 北京奇虎科技有限公司 | 一种在移动终端对软件状态进行检测的方法及装置 |
US20160191476A1 (en) * | 2014-09-14 | 2016-06-30 | Sophos Limited | Key management for compromised enterprise endpoints |
-
2015
- 2015-04-23 CN CN201510197322.4A patent/CN106156619B/zh active Active
-
2016
- 2016-03-25 WO PCT/CN2016/077431 patent/WO2016169390A1/zh active Application Filing
-
2017
- 2017-02-21 US US15/438,251 patent/US11055406B2/en active Active
Patent Citations (16)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20060150256A1 (en) * | 2004-12-03 | 2006-07-06 | Whitecell Software Inc. A Delaware Corporation | Secure system for allowing the execution of authorized computer program code |
US20070079377A1 (en) * | 2005-09-30 | 2007-04-05 | International Business Machines Corporation | Virus scanning in a computer system |
US20070240217A1 (en) * | 2006-04-06 | 2007-10-11 | George Tuvell | Malware Modeling Detection System And Method for Mobile Platforms |
US20090241191A1 (en) | 2006-05-31 | 2009-09-24 | Keromytis Angelos D | Systems, methods, and media for generating bait information for trap-based defenses |
US20140337978A1 (en) | 2006-05-31 | 2014-11-13 | The Trustees Of Columbia University In The City Of New York | Systems, methods, and media for generating bait information for trap-based defenses |
US20090100520A1 (en) * | 2007-10-12 | 2009-04-16 | Microsoft Corporation | Detection and dynamic alteration of execution of potential software threats |
US20090165131A1 (en) * | 2007-12-20 | 2009-06-25 | Treadwell William S | Detection and prevention of malicious code execution using risk scoring |
US20100332996A1 (en) * | 2009-06-25 | 2010-12-30 | Nokia Corporation | Method and apparatus of acquiring information regarding applications for display on a user interface |
US20130198872A1 (en) * | 2010-09-30 | 2013-08-01 | Lenovo (Beijing) Co., Ltd. | Method for component access control and electronic device |
CN103136476A (zh) | 2011-12-01 | 2013-06-05 | 深圳市证通电子股份有限公司 | 移动智能终端恶意软件分析*** |
US20130276056A1 (en) * | 2012-04-13 | 2013-10-17 | Cisco Technology, Inc. | Automatic curation and modification of virtualized computer programs |
US20130318614A1 (en) * | 2012-05-22 | 2013-11-28 | Verizon Patent And Licensing Inc. | Mobile application security assessment |
CN102799812A (zh) | 2012-06-28 | 2012-11-28 | 腾讯科技(深圳)有限公司 | 应用程序的处理方法和装置 |
CN103218564A (zh) | 2013-04-01 | 2013-07-24 | 广东欧珀移动通信有限公司 | 一种移动终端保护方法及装置 |
CN104050417A (zh) | 2014-07-04 | 2014-09-17 | 北京奇虎科技有限公司 | 一种在移动终端对软件状态进行检测的方法及装置 |
US20160191476A1 (en) * | 2014-09-14 | 2016-06-30 | Sophos Limited | Key management for compromised enterprise endpoints |
Non-Patent Citations (4)
Title |
---|
International Search Report in international application No. PCT/CN2016/077431, dated Jul. 5, 2016. |
Office Action dated Feb. 11, 2019 for Chinese Application No. 201510197322.4 with concise English Translation, 8 pages. |
Office Action dated Jun. 28, 2019 for Chinese Application No. 201510197322.4 with concise English Translation, 8 pages. |
Office Action dated Sep. 25, 2019 for Chinese Application No. 201510197322.4 with concise English Translation, 9 pages. |
Also Published As
Publication number | Publication date |
---|---|
US20170161500A1 (en) | 2017-06-08 |
CN106156619A (zh) | 2016-11-23 |
WO2016169390A1 (zh) | 2016-10-27 |
CN106156619B (zh) | 2020-04-03 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US11055406B2 (en) | Application security protection method, terminal, and storage medium | |
JP6100898B2 (ja) | メッセージを処理するための方法およびデバイス | |
CN108427633B (zh) | 显示界面的处理方法及装置 | |
WO2016008414A1 (zh) | 一种安卓***Activity的安全性确定方法及装置 | |
CN102347941B (zh) | 一种基于开放平台的安全应用控制方法 | |
CN106201574B (zh) | 一种应用界面的启动方法及装置 | |
WO2015035895A1 (en) | Methods, devices, and systems for account login | |
CN110929264B (zh) | 漏洞检测方法、装置、电子设备及可读存储介质 | |
US20160350525A1 (en) | Application Program Management Method, Device, Terminal, and Computer Storage Medium | |
CN102215254A (zh) | 安全提供用户对计算机设备远程管理许可的会话密钥信息 | |
US11301313B2 (en) | Collaborative application testing | |
CA2862046C (en) | Method and device for prompting program uninstallation | |
CN106384043A (zh) | 一种二维码安全防护方法及相关设备 | |
CN107046527B (zh) | Web漏洞扫描方法、装置及*** | |
WO2019127043A1 (zh) | 一种终端设备的控制方法及终端设备 | |
US20170116046A1 (en) | Method, Device for Setting System Data and Terminal | |
CN105653904B (zh) | 应用锁屏的处理方法、装置及移动终端 | |
CN109840113B (zh) | 一种应用数据处理方法及其设备、存储介质、终端 | |
CN105373370A (zh) | 控件展示方法及装置 | |
US20150302204A1 (en) | Method and apparatus for displaying test result of terminal | |
US20140068776A1 (en) | User interface hijacking prevention device and method | |
CN105701399B (zh) | 一种应用程序的安全检测方法和装置 | |
US9904783B2 (en) | Information processing method and electronic device | |
CN110262813B (zh) | 用于安装应用的方法和装置 | |
CN108471635B (zh) | 用于连接无线接入点的方法和设备 |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AS | Assignment |
Owner name: TENCENT TECHNOLOGY (SHENZHEN) COMPANY LIMITED, CHI Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:YANG, XUEYING;REEL/FRAME:042656/0507 Effective date: 20161108 Owner name: TENCENT TECHNOLOGY (SHENZHEN) COMPANY LIMITED, CHINA Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:YANG, XUEYING;REEL/FRAME:042656/0507 Effective date: 20161108 |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: FINAL REJECTION MAILED |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: RESPONSE AFTER FINAL ACTION FORWARDED TO EXAMINER |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: ADVISORY ACTION MAILED |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: DOCKETED NEW CASE - READY FOR EXAMINATION |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: NON FINAL ACTION MAILED |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: RESPONSE TO NON-FINAL OFFICE ACTION ENTERED AND FORWARDED TO EXAMINER |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: FINAL REJECTION MAILED |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: ADVISORY ACTION MAILED |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: DOCKETED NEW CASE - READY FOR EXAMINATION |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: NOTICE OF ALLOWANCE MAILED -- APPLICATION RECEIVED IN OFFICE OF PUBLICATIONS |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: PUBLICATIONS -- ISSUE FEE PAYMENT RECEIVED |
|
STPP | Information on status: patent application and granting procedure in general |
Free format text: PUBLICATIONS -- ISSUE FEE PAYMENT VERIFIED |
|
STCF | Information on status: patent grant |
Free format text: PATENTED CASE |